Bump advanced-security/maven-dependency-submission-action from 2.0.0 to 4.0.3

[dependabot]

Bumps advanced-security/maven-dependency-submission-action from 2.0.0 to 4.0.3.

Release notes

Sourced from advanced-security/maven-dependency-submission-action's releases.

v4.0.3

• Updating the build process and tooling for Node 20 support in the CLI executables which were introduced when the dependency-submission-toolkit transitioned in to an ESM module

• Fixes #69 #61

v4.0.2

No release notes provided.

v4.0.1

• Updating branding for the marketplace
• Utilizing rollup to build cli executables as the ESM module for the dependency-submission-toolkit broke the 4.0.0 pkg based executable builds.

v4.0.0

Version 4.0.0 release:

• Breaking change, the name presented in the submission report now matches the current name of the repository maven-dependency-submission-action (previously it was moved from a repository called maven-dependency-tree-action)
• When running the GitHub Action the ref and sha are injected as inputs (with defaults to the current workflow values)
• Updated dependencies, specifically dependency-submission-toolkit that includes improvements to uploading of the snapshots and error handling around unhappy path scenarios
• CLI application options made compatible with the GitHub Actions inputs
• CLI applications made available as part of the release process and notes
• Project testing and releases - swapped jest out for vitest and added GitHub Actions release workflow

v3.0.3

• Fixes issue with POMs that set a non-default outputDirectory resulting is no dependency data being found and uploaded #48.

v3.0.2

What's Changed

• Make action GHES compatible by @​cnagadya in advanced-security/maven-dependency-submission-action#40

New Contributors

• @​cnagadya made their first contribution in advanced-security/maven-dependency-submission-action#40

Full Changelog: advanced-security/maven-dependency-submission-action@v3...v3.0.2

v3.0.1

• Updated to latest dependency snapshot library 1.2.10
• Fixed error in the cli tools that was incorrectly validating the branch specification #26
• Correctly injecting the additional maven command line options #28

v3.0.0

• Introduced support for maven multi module project, reporting as an aggregation on the top level POM
• Added support for maven wrapper if provided in the project
• Improved reporting and modification of the path to the POM file so as to be a correct link in dependency graph
• Fixed the bug reported in #19 by using more parts of the Maven coordinate system to guarantee uniqueness on the PackageURLs for the dependencies, i.e. the type and classifier are now supported if specified.

2.0.1

• Updated the dependency submission tool kit version to 1.2.6 to support GHES

Commits

• 5d0f901 chore: Updating release files
• b2d3972 4.0.3
• fbe856a Merge pull request #74 from advanced-security/cli-fixes
• 720e325 Updating devcontainer base image for Node.js 20 support
• b014938 Updating actions workflows
• c4c9c2a CLI generation fixes to support ESM backed libraries
• bfd2106 chore: Updating release files
• 19aeeca 4.0.2
• 78e33de Merge pull request #70 from advanced-security/revert-62-esm-cli-work
• 68f64b7 Revert "Modifications to support conversion from ESM in to CJS for the execut...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)